Unrated severityNVD Advisory· Published Aug 17, 2009· Updated Jun 16, 2026

CVE-2009-2789

Description

SQL injection vulnerability in the Permis (com_groups) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a list action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Permis/Com Groups
cpe:2.3:a:permis:com_groups:*:*:*:*:*:*:*:*
Joomla/Permisllm-create
Range: =1.0

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/35849nvdExploit
exchange.xforce.ibmcloud.com/vulnerabilities/52142nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000